From 701d936f36df29469786f610f63ff9e61e71c983 Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Sat, 7 Sep 2024 08:52:09 +0200 Subject: [PATCH] Change to values file --- apps/values.yaml | 50 ++++++++++++++++++++++++++++++++++++++++++------ 1 file changed, 44 insertions(+), 6 deletions(-) diff --git a/apps/values.yaml b/apps/values.yaml index ec2ae20..8d9d3d2 100644 --- a/apps/values.yaml +++ b/apps/values.yaml @@ -1,6 +1,44 @@ -spec: - destination: - server: https://kubernetes.default.svc - source: - repoURL: https://charts.jetstack.io - targetRevision: 1.15.3 \ No newline at end of file +global: + enabled: true + tlsDisable: false +injector: + enabled: true +server: + extraEnvironmentVars: + VAULT_CACERT: /vault/userconfig/vault-ha-tls/vault.ca + VAULT_TLSCERT: /vault/userconfig/vault-ha-tls/vault.crt + VAULT_TLSKEY: /vault/userconfig/vault-ha-tls/vault.key + volumes: + - name: userconfig-vault-ha-tls + secret: + defaultMode: 420 + secretName: vault-ha-tls + volumeMounts: + - mountPath: /vault/userconfig/vault-ha-tls + name: userconfig-vault-ha-tls + readOnly: true + standalone: + enabled: false + affinity: "" + ha: + enabled: true + replicas: 3 + raft: + enabled: true + setNodeId: true + config: | + cluster_name = "vault-integrated-storage" + ui = true + listener "tcp" { + tls_disable = 0 + address = "[::]:8200" + cluster_address = "[::]:8201" + tls_cert_file = "/vault/userconfig/vault-ha-tls/vault.crt" + tls_key_file = "/vault/userconfig/vault-ha-tls/vault.key" + tls_client_ca_file = "/vault/userconfig/vault-ha-tls/vault.ca" + } + storage "raft" { + path = "/vault/data" + } + disable_mlock = true + service_registration "kubernetes" {} \ No newline at end of file